$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa File: 98D205F01A4611ECAD279D86C4F9AE02.roa (raw, json) Hash identifier: Lifzj9tbD2A196PkebyEAFBgjuplwdZQ8VmvKwqYLdk= Subject key identifier: 91:5D:62:75:58:36:3C:FB:04:EF:E0:79:E8:6D:D0:06:48:70:D3:A5 Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 06EE Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:29:46 +0000 ROA not before: Mon 02 Mar 2026 22:29:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142015 IP address blocks: 103.164.232.0/23 maxlen: 23 103.164.232.0/24 maxlen: 24 103.164.233.0/24 maxlen: 24 2407:41c0::/32 maxlen: 32 2407:41c0:10::/48 maxlen: 48 2407:41c0:11::/48 maxlen: 48 2407:41c0:12::/48 maxlen: 48 2407:41c0:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: Mar 2 22:29:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a60f5a-3633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:b4:9d:22:7c:c3:12:0b:9c:63:70:2d:3d: 0d:47:ef:a4:92:4b:28:12:cc:11:4f:38:12:c8:ea: 24:83:15:36:2f:46:af:36:34:68:53:47:33:a1:e0: ac:18:91:92:c4:c9:e0:7c:8c:3d:f6:e7:81:03:b7: 60:69:7f:44:fb:02:a2:c5:00:5f:6d:3c:ef:84:39: d8:0a:35:79:e7:ce:22:03:39:69:88:f0:66:bc:6c: 58:93:84:89:cb:b5:77:ab:99:5c:08:c0:9f:40:ef: e5:6b:cf:9f:0e:ee:58:83:dc:38:28:4b:8e:36:0e: fb:ca:6b:ac:94:63:5c:23:73:25:ab:d4:31:7e:d6: 36:0e:ae:0c:b6:e1:52:b2:1d:bc:6a:84:58:7b:71: 4b:1a:36:c2:63:67:b6:ab:d8:d2:30:32:49:91:71: 82:00:15:62:35:da:55:0a:cb:a7:36:38:c4:6a:05: f0:37:50:a0:eb:86:34:ca:4e:f2:be:d1:4b:c7:06: ad:1b:6f:93:c4:44:1c:94:fc:2a:82:6d:6a:00:c9: 82:de:dd:e4:ed:57:05:c8:88:88:ee:c1:5f:5d:ee: e0:fa:78:26:39:30:6f:b5:11:c2:50:13:e0:f7:13: c0:dc:44:5a:dd:57:55:78:c0:94:97:eb:84:b2:0c: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5D:62:75:58:36:3C:FB:04:EF:E0:79:E8:6D:D0:06:48:70:D3:A5 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.232.0/23 IPv6: 2407:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:34:94:3c:45:41:35:c6:63:ca:1e:2a:cd:6c:31:43:63:76: cb:c3:19:74:c8:44:d9:7d:5a:1f:78:fe:33:16:e1:b5:be:95: ab:d4:4d:63:e3:0d:e4:b2:db:8e:32:2f:0a:db:28:ca:8a:87: 14:71:82:4f:e1:67:65:1c:c6:da:b0:7b:5c:45:e9:a3:60:8e: 01:a2:bc:21:95:fa:09:8f:c2:03:a8:f4:45:a9:dc:69:c1:bf: d9:6a:8c:1e:cd:2f:c6:40:ac:14:9d:43:70:4b:b1:32:88:a5: d5:96:5f:b8:5d:a6:57:c2:0c:ba:aa:2d:6f:ca:bf:f8:ad:18: 28:45:6c:4e:55:f5:a7:f6:66:ea:89:9f:df:ba:b8:50:d6:cf: b8:14:23:00:5c:08:85:17:88:23:84:0c:21:5b:c7:bd:10:fe: 2b:b0:cb:30:ba:92:76:0c:28:75:80:46:4c:56:85:d6:2b:e1: 84:ad:23:cc:b1:94:9a:7f:3b:75:74:c5:dc:cd:f3:a5:81:f7: 73:3e:7b:60:dd:b0:28:2a:2f:aa:18:3f:2f:c3:17:2d:39:94: 22:6e:c7:66:19:1d:d7:df:8d:48:b7:39:70:8b:2e:25:62:74: f4:bd:d8:cb:77:a9:2d:75:57:02:ab:15:a9:88:fa:47:0f:8a: f4:61:19:d3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjYwMzAyMjIyOTQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGY1YS0zNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1K0nSJ8wxILnGNwLT0NR++kkksoEswRTzgSyOokgxU2L0avNjRoU0czoeCs GJGSxMngfIw99ueBA7dgaX9E+wKixQBfbTzvhDnYCjV5584iAzlpiPBmvGxYk4SJ y7V3q5lcCMCfQO/la8+fDu5Yg9w4KEuONg77ymuslGNcI3Mlq9QxftY2Dq4MtuFS sh28aoRYe3FLGjbCY2e2q9jSMDJJkXGCABViNdpVCsunNjjEagXwN1Cg64Y0yk7y vtFLxwatG2+TxEQclPwqgm1qAMmC3t3k7VcFyIiI7sFfXe7g+ngmOTBvtRHCUBPg 9xPA3ERa3VdVeMCUl+uEsgyGkQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJFdYnVY Njz7BO/geeht0AZIcNOlMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZCQkEvQkRGRUNEQzI4RDc5MTFFQkE4NDM2QzNCQzRGOUFFMDIvOThEMjA1RjAx QTQ2MTFFQ0FEMjc5RDg2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6ToMA0EAgACMAcDBQAkB0HAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ NJQ8RUE1xmPKHirNbDFDY3bLwxl0yETZfVofeP4zFuG1vpWr1E1j4w3kstuOMi8K 2yjKiocUcYJP4WdlHMbasHtcRemjYI4BorwhlfoJj8IDqPRFqdxpwb/ZaowezS/G QKwUnUNwS7EyiKXVll+4XaZXwgy6qi1vyr/4rRgoRWxOVfWn9mbqiZ/furhQ1s+4 FCMAXAiFF4gjhAwhW8e9EP4rsMswupJ2DCh1gEZMVoXWK+GErSPMsZSafzt1dMXc zfOlgfdzPntg3bAoKi+qGD8vwxctOZQibsdmGR3X341Itzlwiy4lYnT0vdjLd6kt dVcCqxWpiPpHD4r0YRnT -----END CERTIFICATE-----Generated at Thu Mar 26 08:58:21 2026 by rpki-client